CVE-2012-2731

Published: Jun 27, 2012Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.

Affected (19)

Products: Richardo Ante: Ubercart Ajax Cart

Richardo Ante

1 product

Ubercart Ajax Cart

Configuration A

19 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 alpha6
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 alpha7
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 alpha8
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta10
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta11
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta1
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta2
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta3
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta4
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta5
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta6
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta7
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta8
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 beta9
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 rc1
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 rc2
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 rc3
Richardo Ante Ubercart Ajax Cart	Version 6.x-2.0 rc4